Dynamic User Private Networks of a Shared Virtual Network

A network, comprising:

• a plurality of physical network nodes providing a shared virtual network, with the plurality of provider network nodes using filtering of packet traffic according to logical segmentation of the shared virtual network to provide a plurality of dynamic user private networks within the shared virtual network that prevents packets being communicated, not via a gateway device, between user entities associated with different dynamic user private networks of the plurality of dynamic user private networks, with each of the plurality of dynamic user private networks associated with a different user account of a plurality of user accounts of the shared virtual network, with each of the plurality of dynamic user private networks associated with one or more logical or physical access points, and with the plurality of dynamic user private networks communicatively coupling entities via said logical or physical access points on respective user private networks of the plurality of dynamic user private networks;
• and
• a network control system, responsive in real-time to automated processing of received electronic dynamic user private network modification requests received from corresponding particular user accounts of the plurality of user accounts, performing automated modification of said logical segmentation of the shared virtual network defining which logical or physical access points of the shared virtual network belong to which of the plurality of dynamic user private networks.